Bug 1386624
| Summary: | SELinux prevents dhclient from name_bind on ephemeral port | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Stef Walter <stefw> |
| Component: | dhcp | Assignee: | Pavel Zhukov <pzhukov> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | qe-baseos-daemons |
| Severity: | unspecified | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.3 | CC: | lvrabec, mgrepl, mmalik, mvollmer, plautrba, pvolpe, pvrabec, ssekidde |
| Target Milestone: | rc | Keywords: | Patch |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | dhcp-4.2.5-60.el7 | Doc Type: | If docs needed, set a value |
| Doc Text: |
undefined
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-04-13 13:19:13 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1299562 | ||
| Bug Blocks: | 1380362 | ||
Linux localhost.localdomain 3.10.0-493.el7.x86_64 #1 SMP Tue Aug 16 11:45:26 EDT 2016 x86_64 x86_64 x86_64 GNU/Linux Nearby log entries:
Oct 19 05:58:38 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_UP): tbridge: link is not ready
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.5936] device (tbridge): state change: unmanaged -> unavailable (reason 'user-requested') [10 20 39]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.5989] device (tbridge): state change: unavailable -> disconnected (reason 'user-requested') [20 30 39]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6002] device (tbridge): Activation: starting connection 'tbridge' (f7be70bb-4629-45a9-9c41-29d899618cdd)
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6005] device (tbridge): state change: disconnected -> prepare (reason 'none') [30 40 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6009] device (ens6): state change: prepare -> config (reason 'none') [40 50 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6042] device (tbridge): state change: prepare -> config (reason 'none') [40 50 0]
Oct 19 05:58:38 localhost.localdomain cockpit-bridge[1122]: cockpit-polkit helper exited with status: 0
Oct 19 05:58:38 localhost.localdomain polkitd[472]: Operator of unix-session:2 successfully authenticated as unix-user:admin to gain ONE-SHOT authorization for action org.freedesktop.NetworkManager.network-control for unix-process:1122:1699 [cockpit-bridge] (owned by unix-user:admin)
Oct 19 05:58:38 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_UP): tbridge: link is not ready
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6215] device (tbridge): disconnecting connection 'tbridge' for new activation request
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6215] device (tbridge): state change: config -> deactivating (reason 'new-activation') [50 110 60]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6220] device (tbridge): disconnecting for new activation request.
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6223] device (tbridge): state change: deactivating -> disconnected (reason 'new-activation') [110 30 60]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6283] device (tbridge): Activation: starting connection 'tbridge' (f7be70bb-4629-45a9-9c41-29d899618cdd)
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6287] device (ens6): state change: config -> disconnected (reason 'new-activation') [50 30 60]
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:7 'down' [tbridge]: new request (3 scripts)
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:7 'down' [tbridge]: start running ordered scripts...
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6557] device (tbridge): state change: disconnected -> prepare (reason 'none') [30 40 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6585] policy: auto-activating connection 'Wired connection 1'
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6588] device (ens7): state change: prepare -> config (reason 'none') [40 50 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6624] device (tbridge): state change: prepare -> config (reason 'none') [40 50 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6628] policy: auto-activating connection 'Wired connection 1'
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6820] device (ens6): Activation: starting connection 'Wired connection 1' (5d1290e4-86e0-48bc-9eef-9eb2b73043b2)
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6822] device (ens6): state change: disconnected -> prepare (reason 'none') [30 40 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.6825] device (ens6): state change: prepare -> config (reason 'none') [40 50 0]
Oct 19 05:58:38 localhost.localdomain kernel: device ens7 entered promiscuous mode
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7283] device (ens7): state change: config -> ip-config (reason 'none') [50 70 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7309] device (tbridge): attached bridge port ens7
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7309] device (ens7): Activation: connection 'Wired connection 1' enslaved, continuing activation
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7312] device (ens7): state change: ip-config -> secondaries (reason 'none') [70 90 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7314] device (ens7): state change: secondaries -> activated (reason 'none') [90 100 0]
Oct 19 05:58:38 localhost.localdomain kernel: device ens6 entered promiscuous mode
Oct 19 05:58:38 localhost.localdomain kernel: tbridge: port 2(ens6) entered forwarding state
Oct 19 05:58:38 localhost.localdomain kernel: tbridge: port 2(ens6) entered forwarding state
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7548] device (ens7): Activation: successful, device activated.
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7554] device (tbridge): state change: config -> ip-config (reason 'none') [50 70 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7555] device (tbridge): IPv4 config waiting until carrier is on
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7555] device (tbridge): IPv6 config waiting until carrier is on
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7555] device (ens6): state change: config -> ip-config (reason 'none') [50 70 0]
Oct 19 05:58:38 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_CHANGE): tbridge: link becomes ready
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:8 'up' [ens7]: new request (3 scripts)
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:8 'up' [ens7]: start running ordered scripts...
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7601] device (tbridge): attached bridge port ens6
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7601] device (ens6): Activation: connection 'Wired connection 1' enslaved, continuing activation
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7602] device (tbridge): IPv4 config waiting until carrier is on
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7602] device (tbridge): IPv6 config waiting until carrier is on
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7604] device (tbridge): link connected
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7606] dhcp4 (tbridge): activation: beginning transaction (timeout in 45 seconds)
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7773] dhcp4 (tbridge): dhclient started with pid 1454
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7785] device (ens6): state change: ip-config -> secondaries (reason 'none') [70 90 0]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.7830] device (ens6): state change: secondaries -> activated (reason 'none') [90 100 0]
Oct 19 05:58:38 localhost.localdomain kernel: type=1400 audit(1476871118.797:4): avc: denied { name_bind } for pid=1454 comm="dhclient" src=61000 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=udp_socket
Oct 19 05:58:38 localhost.localdomain kernel: e1000: ens7 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
Oct 19 05:58:38 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens7: link becomes ready
Oct 19 05:58:38 localhost.localdomain kernel: tbridge: port 1(ens7) entered forwarding state
Oct 19 05:58:38 localhost.localdomain kernel: tbridge: port 1(ens7) entered forwarding state
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.8640] device (ens6): Activation: successful, device activated.
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:9 'up' [ens6]: new request (3 scripts)
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:9 'up' [ens6]: start running ordered scripts...
Oct 19 05:58:38 localhost.localdomain dhclient[1454]: DHCPDISCOVER on tbridge to 255.255.255.255 port 67 interval 4 (xid=0x7fb27493)
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.8891] device (ens7): link connected
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9007] device (tbridge): state change: ip-config -> deactivating (reason 'connection-removed') [70 110 38]
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9324] audit: op="connection-delete" uuid="f7be70bb-4629-45a9-9c41-29d899618cdd" name="tbridge" pid=1122 uid=1001 result="success"
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9384] audit: op="connection-update" uuid="5d1290e4-86e0-48bc-9eef-9eb2b73043b2" name="Wired connection 1" args="connection.master,connection.slave-type,ipv4.routes,ipv4.addresses,ipv4.dns,ipv4.method,ipv4.dns-search,ipv6.routes,ipv6.addresses,ipv6.dns,ipv6.method,ipv6.dns-search" pid=1122 uid=1001 result="success"
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9435] audit: op="connection-update" uuid="7863356c-a2d7-4b35-b05e-89c52423038d" name="Wired connection 1" args="connection.master,connection.slave-type,ipv4.routes,ipv4.addresses,ipv4.dns,ipv4.method,ipv4.dns-search,ipv6.routes,ipv6.addresses,ipv6.dns,ipv6.method,ipv6.dns-search" pid=1122 uid=1001 result="success"
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9437] device (tbridge): state change: deactivating -> disconnected (reason 'connection-removed') [110 30 38]
Oct 19 05:58:38 localhost.localdomain kernel: device ens7 left promiscuous mode
Oct 19 05:58:38 localhost.localdomain kernel: tbridge: port 1(ens7) entered disabled state
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9580] dhcp4 (tbridge): canceled DHCP transaction, DHCP client pid 1454
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9581] dhcp4 (tbridge): state changed unknown -> done
Oct 19 05:58:38 localhost.localdomain kernel: device ens6 left promiscuous mode
Oct 19 05:58:38 localhost.localdomain kernel: tbridge: port 2(ens6) entered disabled state
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9688] device (tbridge): detached bridge port ens7
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9735] device (tbridge): detached bridge port ens6
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:10 'down' [tbridge]: new request (3 scripts)
Oct 19 05:58:38 localhost.localdomain nm-dispatcher[528]: req:10 'down' [tbridge]: start running ordered scripts...
Oct 19 05:58:38 localhost.localdomain NetworkManager[509]: <info> [1476871118.9921] device (ens7): state change: activated -> disconnected (reason 'connection-removed') [100 30 38]
Oct 19 05:58:39 localhost.localdomain NetworkManager[509]: <info> [1476871119.0700] device (tbridge): link disconnected
Oct 19 05:58:39 localhost.localdomain NetworkManager[509]: <info> [1476871119.0701] device (ens6): state change: activated -> disconnected (reason 'connection-removed') [100 30 38]
Pavel, is it expected that it binds ephemeral ports? Or is it a fallback? (In reply to Miroslav Grepl from comment #4) > Pavel, > is it expected that it binds ephemeral ports? Or is it a fallback? I don't think we should need to use them. This happens rarely, but weekly in the Cockpit integration runs. Maybe once every few thousand runs. Here is such a case: https://fedorapeople.org/groups/cockpit/logs/pull-5612-2e63bf03-verify-rhel-7/log.html#114 type=1400 audit(1482141972.672:4): avc: denied { name_bind } for pid=621 comm="dhclient" src=61000 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=udp_socket Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3573] settings: hostname: using hostnamed Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3575] settings: hostname changed from (none) to "localhost.localdomain" Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3579] dhcp-init: Using DHCP client 'dhclient' Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3579] manager: WiFi enabled by radio killswitch; enabled by state file Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3580] manager: WWAN enabled by radio killswitch; enabled by state file Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3580] manager: Networking is enabled by state file Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3580] Loaded device plugin: NMVxlanFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3580] Loaded device plugin: NMVlanFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3580] Loaded device plugin: NMVethFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMTunFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMMacvlanFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMIPTunnelFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMInfinibandFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMEthernetFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMBridgeFactory (internal) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3581] Loaded device plugin: NMBondFactory (internal) Dec 19 05:06:12 localhost.localdomain nm-dispatcher[537]: req:1 'hostname': new request (4 scripts) Dec 19 05:06:12 localhost.localdomain nm-dispatcher[537]: req:1 'hostname': start running ordered scripts... Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3634] Loaded device plugin: NMTeamFactory (/usr/lib64/NetworkManager/libnm-device-plugin-team.so) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3661] device (lo): link connected Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3692] manager: (lo): new Generic device (/org/freedesktop/NetworkManager/Devices/0) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3729] manager: (eth0): new Ethernet device (/org/freedesktop/NetworkManager/Devices/1) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3768] device (eth0): state change: unmanaged -> unavailable (reason 'managed') [10 20 2] Dec 19 05:06:12 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.3813] device (eth0): link connected Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.4250] device (eth0): state change: unavailable -> disconnected (reason 'none') [20 30 0] Dec 19 05:06:12 localhost.localdomain kernel: bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.4477] policy: auto-activating connection 'System eth0' Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.4506] device (eth0): Activation: starting connection 'System eth0' (5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.4511] device (eth0): state change: disconnected -> prepare (reason 'none') [30 40 0] Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.4520] manager: NetworkManager state is now CONNECTING Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.4619] device (eth0): state change: prepare -> config (reason 'none') [40 50 0] Dec 19 05:06:12 localhost.localdomain kernel: Netfilter messages via NETLINK v0.30. Dec 19 05:06:12 localhost.localdomain kernel: ip_set: protocol 6 Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.6297] device (eth0): state change: config -> ip-config (reason 'none') [50 70 0] Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.6317] dhcp4 (eth0): activation: beginning transaction (timeout in 45 seconds) Dec 19 05:06:12 localhost.localdomain NetworkManager[517]: <info> [1482141972.6352] dhcp4 (eth0): dhclient started with pid 621 Dec 19 05:06:12 localhost.localdomain kernel: type=1400 audit(1482141972.672:4): avc: denied { name_bind } for pid=621 comm="dhclient" src=61000 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=udp_socket Dec 19 05:06:12 localhost.localdomain dhclient[621]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 4 (xid=0x3d7fd6dc) Dec 19 05:06:16 localhost.localdomain systemd-vconsole-setup[408]: /usr/bin/setfont failed with error code 71. Dec 19 05:06:16 localhost.localdomain dhclient[621]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 7 (xid=0x3d7fd6dc) Dec 19 05:06:18 localhost.localdomain dhclient[621]: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x3d7fd6dc) Dec 19 05:06:18 localhost.localdomain dhclient[621]: DHCPOFFER from 10.111.112.1 Dec 19 05:06:18 localhost.localdomain dhclient[621]: DHCPACK from 10.111.112.1 (xid=0x3d7fd6dc) Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0808] dhcp4 (eth0): address 10.111.118.188 Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0810] dhcp4 (eth0): plen 20 (255.255.240.0) Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0811] dhcp4 (eth0): gateway 10.111.112.1 Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0813] dhcp4 (eth0): server identifier 10.111.112.1 Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0814] dhcp4 (eth0): lease time 3600 Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0815] dhcp4 (eth0): nameserver '10.111.112.1' Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0816] dhcp4 (eth0): domain name 'cockpit.lan' Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0818] dhcp4 (eth0): state changed unknown -> bound Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0829] device (eth0): state change: ip-config -> ip-check (reason 'none') [70 80 0] Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0887] device (eth0): state change: ip-check -> secondaries (reason 'none') [80 90 0] Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0906] device (eth0): state change: secondaries -> activated (reason 'none') [90 100 0] Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.0913] manager: NetworkManager state is now CONNECTED_LOCAL Dec 19 05:06:18 localhost.localdomain nm-dispatcher[537]: req:2 'connectivity-change': new request (4 scripts) Dec 19 05:06:18 localhost.localdomain nm-dispatcher[537]: req:2 'connectivity-change': start running ordered scripts... Dec 19 05:06:18 localhost.localdomain dhclient[621]: bound to 10.111.118.188 -- renewal in 1405 seconds. Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.2238] manager: NetworkManager state is now CONNECTED_GLOBAL Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.2239] policy: set 'System eth0' (eth0) as default for IPv4 routing and DNS Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.2240] policy: set 'System eth0' (eth0) as default for IPv6 routing and DNS Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.3403] device (eth0): Activation: successful, device activated. Dec 19 05:06:18 localhost.localdomain nm-dispatcher[537]: req:3 'up' [eth0]: new request (4 scripts) Dec 19 05:06:18 localhost.localdomain NetworkManager[517]: <info> [1482141978.3417] manager: startup complete Dec 19 05:06:18 localhost.localdomain nm-dispatcher[537]: req:3 'up' [eth0]: start running ordered scripts... The related bug is https://bugzilla.redhat.com/show_bug.cgi?id=1299562 that is fixed. So I think this one should be as well. Fixed in dhcp-4.2.5-60.el7 |
Description of problem: During the Cockpit integration tests we see this SELinux issue during the tests. It does not seem to affect the test behavior: Error: type=1400 audit(1476871118.797:4): avc: denied { name_bind } for pid=1454 comm="dhclient" src=61000 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=udp_socket Version-Release number of selected component (if applicable): [root@localhost ~]# rpm -q dhclient dhclient-4.2.5-47.el7.x86_64 [root@localhost ~]# rpm -q selinux-policy-targeted selinux-policy-targeted-3.13.1-93.el7.noarch [root@localhost ~]# rpm -q NetworkManager NetworkManager-1.4.0-0.5.beta1.el7.x86_64 How reproducible: Rarely.